Unrated

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature...

CVE-2019-15108 First seen on SecPulse Aug 16, 2019

Original description The description as published by the source.

An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch docs.wso2.com

Key facts

Severity: Unrated
Published: Aug 16, 2019
First seen on SecPulse: Aug 16, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52